Request a 30-min IT review
  1. Home
  2. Blog
  3. Self-check
Useful · 3 minutes · no sign-up

IT and security
in 10 questions

Answer honestly: only you see the result. We store nothing and ask for no contacts.

  1. Does signing in to your mail and main services need a code or an app confirmation, not only a password?
  2. In the last 3 months, have you restored data from a backup at least once to check that it works?
  3. Is there a copy of your data that a work computer cannot reach: offline, or in separate storage without constant access?
  4. Do updates for Windows, macOS, browsers and the router install automatically, or at least once a month?
  5. When someone leaves, are their accounts in mail, CRM and the cloud closed on the same day?
  6. Is your mail domain protected from forgery: SPF, DKIM and DMARC set up, with a quarantine or reject policy?
  7. Does your team have an approved AI tool and a simple rule on which data must not go into it?
  8. Is every change of payment details that comes by mail or messenger confirmed by a call to a known number?
  9. Is it written down who to call and what to do if data gets encrypted or a server goes down, and is that list on paper?
  10. Does the office keep working in a power cut: a UPS for the router and a backup internet connection?

Your answers are counted in your browser and sent nowhere.

Turn on JavaScript to count your score. Below are all 10 tips: check yourself against the list.

What to fix first

  1. Turn on two-step sign-in for mail, banking, cloud and admin panels. Start with the owner and accounting.

    Read more →

  2. Once a quarter, restore one real file or database from the backup. A backup you never restored from does not count.

    Read more →

  3. Keep one copy apart: an external drive you unplug after the backup, or cloud storage with versions nobody can change. Ransomware deletes everything it can see.

    Read more →

  4. Turn on automatic updates on every computer and check the router and servers once a month. Most breaches go through old, known holes.

    Read more →

  5. List your services and make a leaver checklist: mail, CRM, cloud, bank, social media, shared passwords. Close everything on the last working day.

    Read more →

  6. Ask whoever manages your domain to set up SPF, DKIM and DMARC. Without them a fraudster can send mail from your real address.

  7. Give the team a company AI tool and one rule: contracts, personal and financial data go only there. Otherwise they end up in personal accounts.

    Read more →

  8. Make it a rule: new bank details are confirmed only by a call to the number in the contract, never the one in the message. This stops most payment fraud.

  9. Put it on one sheet: who decides, the numbers of your provider and administrator, where the backups are, who holds the main passwords. Print it: in an attack the computers may not work.

    Read more →

  10. Put a UPS on the router and the switch and add a second connection, such as a mobile router or satellite. Check how long the battery really lasts.

    Read more →

Want to go through your result with an engineer?

30 minutes online, free. We tell you what to do first in your case.

Discuss my result